Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
File:                     14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa (raw, json)
Hash identifier:          qCfG1LwRIdZtjQcQzHplxbeGeqvGnJF554v8B4z1zVM=
Subject key identifier:   B0:4B:0F:E5:14:6D:2F:D8:9E:4B:0D:F1:92:C2:29:72:37:05:F3:FC
Certificate issuer:       /CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
Certificate serial:       010D0C9F4328584D4A8F956636F2B72DAEB0EA00
Authority key identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        192.206.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:95:66:36:f2:b7:2d:ae:b0:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=f5535894-22c8-4b62-ae39-8cd37e796512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:6b:4e:e8:f0:5a:28:91:5f:96:de:9d:26:
                    66:54:0b:18:39:b1:b3:5d:43:d1:fe:a1:c5:9c:56:
                    7e:b2:64:8c:1c:2f:8e:92:c5:c9:ae:99:53:80:87:
                    b8:ea:0a:2b:af:4f:d1:cb:5e:74:8e:99:4a:8c:fb:
                    37:8c:58:f2:7e:47:43:60:46:60:59:a2:5b:b3:46:
                    80:78:cc:fd:cd:23:3b:a2:71:93:fd:49:df:a2:1c:
                    3f:83:3c:23:75:73:3a:30:7e:76:65:62:20:56:a2:
                    5e:d0:a6:2b:2a:f6:a0:62:c0:05:44:3f:92:5a:ac:
                    0c:db:aa:a1:dc:33:02:cf:b1:7e:be:34:bb:15:62:
                    7e:10:5a:f6:cf:42:9f:b9:4d:3a:5c:5d:20:96:99:
                    39:1a:eb:8d:37:e9:5c:60:9b:c5:b0:b0:d3:c9:ef:
                    6a:3a:56:5a:57:88:55:17:d4:79:28:ce:5e:1c:cd:
                    07:42:45:cb:b4:41:43:43:c3:0b:97:8e:a7:7c:f1:
                    13:3b:ab:43:ed:5d:80:eb:70:b3:bc:af:9f:2d:28:
                    c0:fa:a8:29:0f:47:6d:ee:9e:32:cd:30:40:69:59:
                    1d:51:bd:92:99:92:19:23:bc:38:71:0e:4e:18:52:
                    b9:c9:e7:c8:64:2a:ba:53:af:14:59:6d:31:cb:95:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:0F:E5:14:6D:2F:D8:9E:4B:0D:F1:92:C2:29:72:37:05:F3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl

            X509v3 Authority Key Identifier:
                keyid:81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:2e:53:7d:d9:22:df:bb:17:b3:db:97:27:64:00:36:b9:
         47:fc:e3:d2:59:ac:1b:be:4c:03:6d:e7:2d:c6:1c:15:26:f7:
         57:5f:5f:a4:a6:b3:6e:ed:4c:99:1b:6b:61:85:a3:a6:ad:a6:
         3f:de:77:7f:9b:04:c0:31:91:58:99:02:01:d4:26:4d:20:53:
         0a:a8:06:c8:16:ca:06:c8:bc:ef:7d:a8:db:3e:2f:56:36:f3:
         38:7d:c6:9e:32:ea:08:2b:e5:ff:2b:54:66:14:8a:bf:7a:47:
         c7:76:40:d3:f0:5b:70:35:ff:2c:4d:bb:6c:44:4d:e2:a2:53:
         45:10:c5:ae:a1:d8:ee:fe:1a:9c:02:00:47:9b:a3:7b:01:17:
         a5:a6:03:5f:f6:42:d3:50:28:28:49:19:59:0a:04:a8:09:2a:
         1c:ba:76:1f:07:f8:06:ad:59:5c:34:ea:df:e7:69:de:78:dd:
         fd:fa:8e:cb:74:e8:17:07:e5:e2:53:60:ce:e2:d6:02:f9:69:
         6f:b6:b9:81:26:76:12:43:c5:69:88:cd:ac:9b:d6:26:08:9f:
         56:16:78:7b:63:c4:e6:a5:b8:09:f5:1f:de:5f:f0:79:15:3e:
         e5:3b:8f:58:6a:0e:27:79:81:28:f0:90:c3:79:dc:01:23:de:
         1b:f7:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:54 2026 by rpki-client